Untrusted search path vulnerability in Apple OS X before 10.11.1 allows local users to bypass intended Gatekeeper restrictions and gain privileges via a Trojan horse program that is loaded from an unexpected directory by an application that has a valid Apple digital signature. <a href"http://cwe.mitre.org/data/definitions/426.html">CWE-426: Untrusted Search Path</a>
Publication date: Mon, 11 Jan 2016 17:59:00 +0000